The web-service I need to develop needs to be session based.
That is to say, there is a login method which is secured by JAAS authentication. If the user is authenticated, a session-id is returned which is provided to other methods which do not need to be authenticated, for as long as the session lasts, that is, as long as the session is found in the database. In other words, each call is not a session unto itself, not just an atomic data operation, but part of a larger whole.
Is there any documentation on achieving this pattern and is it even possible with JBossWS?
Thanks.